https://community.checkpoint.com/t5/Firewall-and-Security-Management/Geo-Policy/m-p/96590#M78475 <P>With Geo Policy enabled, can a person spoof an ip address from a permitted country i.e United States and be allowed to pass through the firewall.&nbsp; Is there a way of preventing such actions?</P> Fri, 11 Sep 2020 16:22:10 GMT cc50339b-5d4d-3 2020-09-11T16:22:10Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Geo-Policy/m-p/96590#M78475 <P>With Geo Policy enabled, can a person spoof an ip address from a permitted country i.e United States and be allowed to pass through the firewall.&nbsp; Is there a way of preventing such actions?</P> Fri, 11 Sep 2020 16:22:10 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Geo-Policy/m-p/96590#M78475 cc50339b-5d4d-3 2020-09-11T16:22:10Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Geo-Policy/m-p/96596#M78476 <P>One of the ways spoofing is done is using IP Options.<BR />Check Point generally blocks these packets by default.<BR />There are also anti-spoofing settings on the gateway to ensure the right IPs come from the right interface.<BR />If someone is able to spoof an IP address and complete a three way TCP handshake from the wrong location despite this, there are far bigger issues to worry about.</P> Fri, 11 Sep 2020 19:53:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Geo-Policy/m-p/96596#M78476 PhoneBoy 2020-09-11T19:53:28Z